rack-shield 1.2.0 → 1.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8853aad4ab5646f5a5477f712fe297f005660958e15358144fc175d4f1497215
-  data.tar.gz: 23cf1ec7e0b8d547ccbaf66a63bcb8f8914677a70b1377b8ca4c4ba3894f8d56
+  metadata.gz: 51d97823d4d9691ca4e7aa4279a5b3271d77edf5d74c2952529242055e3677a5
+  data.tar.gz: d5bfe6b47f7f5e6ca8002f7858803423c9f70bb08295fb65f1b7dafa6b69f685
 SHA512:
-  metadata.gz: ddcbe97f5e6f3ba3ba3d50be2b60c248ac1c2e5c730744e498e7b7f6093d4f5adbc7b3c87bdae15569184387c6ef6afaf098752482d869b6842aaaf32eba8360
-  data.tar.gz: e558e60a3711893170dc994a9ec6d7c31b871f4237ba8ba7779cec44cc65ed8dd198579f2729e8e438948cbe5c953adba3c521adb70ecea999d22a4ec010567f
+  metadata.gz: bfb74fe3a4b4a47a4353473c49af671a8fa43ed85f57e0864939148a1f89640b003310156505f665e69a06887c451a998c8ca4b5a0c4978f9f13e2de135bde66
+  data.tar.gz: 197b286bd3770e8053c3343ad417f228e26beb9c759c114069c9fe1a540e8c2523d51963944706c461f1a224c8cac4cbe151ce143d8dd18fa59ffc95d2cbe32f

data/README.md

@@ -1,3 +1,5 @@
+[![Gem Version](https://badge.fury.io/rb/rack-shield.svg)](http://badge.fury.io/rb/rack-shield) [![build](https://github.com/mtgrosser/rack-shield/actions/workflows/build.yml/badge.svg)](https://github.com/mtgrosser/rack-shield/actions/workflows/build.yml)
+
 ![Shield](https://raw.githubusercontent.com/mtgrosser/rack-shield/master/doc/shield.svg)
 
 # Rack::Shield

data/lib/rack/shield/version.rb

@@ -1,5 +1,5 @@
 module Rack
   module Shield
-    VERSION = '1.2.0'
+    VERSION = '1.2.2'
   end
 end

data/lib/rack/shield.rb

@@ -8,7 +8,7 @@ require_relative 'shield/request_ext'
 module Rack
   module Shield
     DEFAULT_PATHS = [/\/wp-(includes|content|admin|json|config)/,
-                     /\.(php|cgi|asp|aspx|shtml|log|(my)?sql(\.tar)?(\.t?(gz|zip))?|cfm|py|lasso|e?rb|pl|jsp|do|action|sh|dll)\z/i,
+                     /\.(php\d?|cgi|asp|aspx|shtml|log|(my)?sql(\.tar)?(\.t?(gz|zip))?|cfm|cmd|py|lasso|e?rb|pl|jsp|do|action|sh|dll|lsp)\z/i,
                     'cgi-bin',
                     'phpmyadmin',
                     '/pma/',
@@ -20,6 +20,7 @@ module Rack
                     '.php/',
                     '/browsedisk',
                     '/mambo/',
+                    '/ipython/',
                     '/jenkins/',
                     '/joomla/',
                     '/varien/js.js',
@@ -54,12 +55,30 @@ module Rack
                     '/aspnet-ajax/',
                     '/Portal.mwsl',
                     '/adminer',
+                    '/appsuite/signin',
+                    '/io.ox/',
+                    '/tkset/',
+                    '/bakula-web',
+                    '/snort/',
+                    '/officescan/',
+                    '/servlet/',
+                    '/ox6/',
+                    '/ws_utc/',
+                    '/OASREST/',
+                    '/WEB-INF/',
+                    '/faspex/',
+                    '/(download)/',
+                    '/nacos/',
+                    '/UploadServlet',
+                    '/meta-data/identity-credentials/',
+                    '/SDK/webLanguage',
                     /\A\/"/,
                     /\/\.(hg|git|svn|bzr|htaccess|ftpconfig|vscode|remote-sync|aws|env|DS_Store)/,
                     /\/old\/?\z/,
                     /\/\.env\z/,
                     /\A\/old-wp/,
-                    /\A\/(wordpress|wp)(\/|\z)/]
+                    /\A\/(wordpress|wp)(\/|\z)/,
+                    /Open-Xchange/i]
     
     DEFAULT_QUERIES = [/SELECT.+FROM.+/i,
                        /SELECT.+COUNT/i,
@@ -78,7 +97,7 @@ module Rack
                        'HelloThinkCMF',
                        'XDEBUG_SESSION_START']
     
-    DEFAULT_BODIES = []
+    DEFAULT_BODIES = ['OKMLlKlV']
     
     class << self
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack-shield
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.2.2
 platform: ruby
 authors:
 - Matthias Grosser
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-03-16 00:00:00.000000000 Z
+date: 2023-08-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack-attack
@@ -44,7 +44,7 @@ homepage: https://github.com/mtgrosser/rack-shield
 licenses:
 - MIT
 metadata: {}
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -60,7 +60,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubygems_version: 3.1.4
-signing_key:
+signing_key: 
 specification_version: 4
 summary: Block and unblock evil requests
 test_files: []